Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier: mXn1Gl8v/Fm8Krt4iDa5JWlncbcgaeQQQAQOMz+pOiw=
Subject key identifier: C5:8D:52:D5:F2:4C:2B:12:7D:6D:EF:0D:BE:5D:7E:87:06:53:F4:1D
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial: 0194BCE060F944D4B4460796E4CF6B0B0F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number: 0CDE
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=)
2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: fWlwhR2EmFwJjMCpkrmMz7zPAekXFff4TPL6vzA7Y2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:f9:44:d4:b4:46:07:96:e4:cf:6b:0b:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=c58d52d5f24c2b127d6def0dbe5d7e870653f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:b5:e5:3b:a5:c6:2d:41:fe:19:77:90:89:
8c:2c:97:2a:1b:61:2f:56:80:75:2e:3c:8c:a1:f9:
f7:3e:5b:f9:e1:c8:b1:91:9b:5e:50:67:18:11:e4:
56:91:75:c2:bc:07:8b:df:f7:24:c7:f6:b4:0f:24:
b6:d7:03:ec:c0:8d:6b:92:16:d7:f0:f7:67:3d:4b:
67:6a:ca:71:26:a0:f4:4a:01:b4:cf:04:42:e7:8c:
f7:8e:05:c9:3c:9c:13:4c:c1:98:80:b8:f4:4b:1a:
66:74:48:07:eb:46:06:01:9f:a5:79:ee:45:36:27:
98:18:7f:6f:35:cb:0b:5b:7f:09:bd:18:4b:fe:6e:
a3:0f:98:de:e3:29:ca:7b:e9:19:cd:18:26:83:21:
18:56:b6:8e:b0:0f:13:76:ea:0c:eb:1d:57:d9:73:
e4:a2:d3:40:91:26:8d:15:7b:95:dd:c8:d8:b2:bb:
79:04:4b:4c:72:36:ac:f7:f5:a0:4d:b3:c8:45:65:
b7:a5:64:0c:df:67:ce:81:c5:af:c8:7a:e1:38:02:
3d:bb:3c:a8:08:b3:8a:c5:a8:09:50:a0:9b:6a:12:
4c:6e:f5:e0:c6:54:6e:09:71:e0:69:83:4e:cb:51:
78:79:12:a2:66:a3:28:c2:16:37:46:87:2c:60:13:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:52:D5:F2:4C:2B:12:7D:6D:EF:0D:BE:5D:7E:87:06:53:F4:1D
X509v3 Authority Key Identifier:
keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:ae:da:2a:be:ad:ae:e1:9f:65:10:c5:c4:3f:58:d9:05:
8d:e3:72:b4:7d:f3:c5:34:d7:61:1d:62:f8:92:c6:b6:80:55:
4a:67:7c:00:8d:02:1d:b8:2f:d8:c1:7b:e9:6b:85:c1:28:c8:
f0:fa:8c:7c:b4:51:4f:e3:82:be:73:4f:1e:86:30:b5:09:eb:
dd:6a:85:2a:e7:1e:92:a7:dc:81:4b:26:1b:d7:4f:52:ad:39:
55:9a:80:91:10:fa:52:26:b5:d2:1c:55:45:ce:93:9d:40:20:
3f:42:5b:94:ba:fb:03:b8:29:27:25:60:4e:2c:49:2d:a8:a6:
b0:0f:7f:67:ce:87:b0:d2:de:9c:00:e2:43:89:78:87:87:b6:
1c:09:9a:82:d5:6c:2e:28:7d:8e:1a:a0:4a:5c:2f:f1:0c:e6:
70:20:d1:e5:05:24:91:58:37:94:a0:bc:d2:a8:0c:9a:e1:ab:
2f:48:2b:de:2c:dd:8d:7b:db:fc:e0:09:10:06:e3:5e:15:99:
2b:87:d1:7a:59:c6:f9:eb:76:d8:4f:9f:2e:46:79:9c:d9:12:
c0:c4:02:25:24:32:ac:4e:fc:a6:88:b0:1b:52:97:d1:20:3a:
70:b8:7d:43:14:d7:97:21:30:84:bc:bf:ea:0b:f3:7a:8f:4e:
41:c7:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:00 2025 by rpki-client